Olympique Marseille confirms 'attempted' cyberattack after data leak

Source: Bleeping Computer

Overview

French professional football club Olympique de Marseille has confirmed a cyberattack after a threat actor claimed on Monday that it breached the club’s systems earlier this month.

Founded 126 years ago, Olympique Marseille competes in Ligue 1, the top tier of the French football league system, and was the first French club to win the UEFA Champions League in 1993.

Official statement

On Tuesday, Olympique Marseille issued a statement confirming that it had been hit by a cyberattack, following claims by a threat actor that they had breached some of its servers.

“Olympique de Marseille has announced that it was recently the target of an attempted cyberattack, in a national and international context marked by a resurgence of attacks targeting large organizations,” the football club said.
Read the full statement.

“Thanks to the immediate mobilization of our technical teams and specialized service providers, the situation was quickly brought under control. To date, all our activities are continuing as normal and in complete security, and we are continuing our investigations into the scope of the incident. The club would like to reassure its supporters that no banking details or passwords have been compromised.”

Leak details

The threat actor has also leaked a sample of the allegedly stolen information on a hacking forum, claiming to have stolen a database containing Olympique Marseille staff and supporter information.

• The claimed database includes information on 400,000 individuals: names, addresses, order information, email addresses, and mobile phone numbers.
• It also contains data on more than 2,050 Drupal CMS accounts, including 34 OM staff members and 1,770 contributors and moderators.

Olympique de Marseille entry on hacking forum (BleepingComputer)

“Today I am selling Olympique de Marseille (OM) dump from Feb 2026, iconic French football club in Ligue 1, online boutique for merch, fan memberships, massive supporter base in France and worldwide,” the threat actor said.

Club response

Although Olympique Marseille has not confirmed a data breach, it has:

• Reported the incident to the French data protection authority (CNIL).
• Filed a complaint with law‑enforcement authorities.
• Advised fans to remain vigilant against phishing attempts and to report any suspicious activity.

An Olympique Marseille spokesperson was not immediately available for comment when contacted by BleepingComputer earlier today.

Related incident

In November, the French Football Federation (FFF) also disclosed a data breach after attackers gained access to administrative management software used by football clubs via a compromised account.
Read more about the FFF breach.